Insights
GRC methodology, without the noise.
Senior-advisor perspective on governance, risk and compliance program execution — written for executives who need to act on it, not just read it.
GRC Strategy & Operations
The GRC Execution Gap: Why Risk Insight Is No Longer Enough
Organizations have more risk data, assessments, dashboards and GRC technology than ever. The harder problem is turning what they know into owned, evidenced and verified action.
AI GovernanceAI Governance Has Grown Up: What Changes When AI Starts Acting, Not Just Answering
Enterprise AI governance was built to answer what a model is allowed to say. Agentic systems that act on their own — calling tools, touching systems, taking the next step without a human in the loop — pose a different question: what is it allowed to do, and who answers for it.